#32988 [NEW]: OCI doesn't support DB external authentication

From: stephane dot dekeyzer at kmi dot be Operating system: Any PHP version: 5.0.4 PHP Bug Type: OCI8 related Bug description: OCI doesn't support DB external authentication Description: ------------ OCILogon, OCIPLogon, doesn't support external authentication to the database ... I know this a ecurity hole if you use php with apache, but when you use it in scripting mode, it is very usefull, and itsn't a security breach. I met Christopher Jones last week at the PHP conference in Amsterdam who agreed and asked me to post this bug so OCI developpers can discuss about it. It would a be a good idea when php runs without apache, external authentication would be allowed. I have a modification of the oci8.c wich support external authentication, just mail me if you want to have it ! Reproduce code: --------------- $conn = OCILogon("", "", mydb); // should work $conn = OCILogon("/", "", mydb); // should also work $conn = OCILogon(null, null, mydb); // should also work Expected result: ---------------- $conn = OCILogon(null, null, mydb); // should work and log me in as the os user curently running the script Actual result: -------------- $conn = OCILogon(null, null, mydb); // gives an error. -- Edit bug report at http://bugs.php.net/?id=32988&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=32988&r=trysnapshot4 Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=32988&r=trysnapshot50 Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=32988&r=trysnapshot51 Fixed in CVS: http://bugs.php.net/fix.php?id=32988&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=32988&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=32988&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=32988&r=needscript Try newer version: http://bugs.php.net/fix.php?id=32988&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=32988&r=support Expected behavior: http://bugs.php.net/fix.php?id=32988&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=32988&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=32988&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=32988&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=32988&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=32988&r=dst IIS Stability: http://bugs.php.net/fix.php?id=32988&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=32988&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=32988&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=32988&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=32988&r=mysqlcfg